npm/@whyour/qinglong CVE-2026-55445: critical, EPSS 0.66%
Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication
Action: Upgrade @whyour/qinglong to 2.20.1 or later.
npm i @whyour/qinglong@2.20.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.1 | - |
Fixed versions
| 2.20.1 |
Sources
- osv: GHSA-v667-gc2r-2xm7
- https://github.com/whyour/qinglong/security/advisories/GHSA-v667-gc2r-2xm7
- https://nvd.nist.gov/vuln/detail/CVE-2026-55445
- https://github.com/whyour/qinglong/pull/2941
- https://github.com/whyour/qinglong/commit/6bec52dca158481258315ba0fc2f11206df7b719
- https://github.com/whyour/qinglong
CVE-2026-55445 · published · modified · JSON